El Zorro wrote:Nevertheless, has anybody had any trouble with online banking?
Security is never perfect. One extreme is the free VMWare Player at (
http://vmware.com/products/player/) and secure web browser appliance (
http://www.vmware.com/appliances/direct ... erapp.html).
If you're not familiar with this, VMWare is a virtual machine which you can run in Windows or Linux. Player is a free implementation which allows people to "play" images created by people who own the commercial product. They're called "appliances." VMWare also offers a free "server" edition. But, it's not optimized for desktop functions (sluggish). But, there are ways to create your own custom appliances using "server" without buying the software to do it. Then "play" them in "player" which is optimized for desktop use. (If you want to do that, let me know and I'll look for the web sites that describe how it's done.).
In this case, the appliance is designed to do nothing but give you a virtual Linux OS which does nothing more than run a browser. When you end the VM guest, everything you did is gone. Cookies. Spyware. Keystrokes. When you start the VM again, it knows nothing about your previous execution. If spyware gets onto your host OS (which the player is running on) you'll be exposed. But, this kind of virtualization is supposed to prevent spyware from reaching your host OS.
At the other extreme is just using safe practices. Don't install toolbars on your browser. Don't agree to download software in order to browse a site. Don't act upon phishing email (asking for account details, or referring you to a site to do so). Don't use internet cafes. Put your computer behind a router using NAT translation (ex. a Linksys WRT54G, and use a WAP key so nobody locally can get access to your 129.168.x.x subnet, which would be a lot like having no firewall.). Run Lavasoft's free Adware/spyware checker.
I lean towards the latter. Except I rely upon two-factor authentication to control my financial accounts. Schwab and PayPal offer this device. (Free at Schwab. $5 at PayPal). It's just one of these key fobs (
https://www.paypal.com/us/cgi-bin/websc ... ey-outside). When you login, you use your password and the number currently displayed on the key fob.
If spyware obtains your password, nobody can use it without the passcode (which is only good for 30 seconds). If you lose the key fob, nobody can use it without having the password. It's a good layer of protection.
All my backup bank accounts are linked at Schwab and PayPal. I can only initiate transfers from/to the bank accounts from those locations. If spyware captures my password at any bank account, they can't do anything because there's not much money there. They can't drain other accounts.
The only other thing I do is use different passwords everywhere. And, I use fake answers to "secret questions." To me, "secret questions" are a huge security hole. The answers are factual (meaning they're more than just guessable). And, they're shared. (A secret isn't a secret when it's shared.). The problem with using fake/random answers to secret questions is you can't remember them. So, I keep them written down in a little book. Writing down challenge responses is usually a bad idea. But, I trust my ability to secure my little book more than I trust strangers to keep shared-secrets secure.
For me, that's good enough. I've seen other things, like a Linux OS on a USB flash drive, with various web proxy/anonymizing software, firewall, disk encryption. That's the ultimate security. You could plug it into an internet cafe computer, boot from the USB drive, and leave no signs at all of your activities. But, the last time I looked at it, it was *slow*.
I've read Charles (admin) critical comments about PayPal. I don't know if Google Checkout lets you link to accounts. And, more importantly, whether they offer two-factor authentication.
If you consider doing something like this, you might check whether eTrade offers the two-factor key fob. eTrade seems to have better interest rates than Schwab. They say their ATM card is 1%. But, Charles says he consistently gets 0%. That might be a better way to go. But, I wouldn't do anything without two-factor authentication (to control multiple bank accounts from that one account).
Mark
There are 10 different kinds of people in the world. There are those who understand binary, and those who don't.